Security briefing · Archive
Research & engineering · Archive
Browse collected headlines by topic and follow links to the original publishers.
Research & engineering
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Security Roundup September 2026 ↗ (opens in a new tab)
Zilliz / Attu | 2.6.5 ↗ (opens in a new tab)
New THOR Detection Coverage for Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 ↗ (opens in a new tab)
CRA & PSIRT Webinar | Notification Obligations | ONEKEY ↗ (opens in a new tab)
Breach of Confidence — 28 September 2026 ↗ (opens in a new tab)
28th September – Threat Intelligence Report ↗ (opens in a new tab)
Statistical-Differential Fault Attack on SHA-2 ↗ (opens in a new tab)
Arista VeloCloud Orchestrator CVE-2026-114625 (Critical) ↗ (opens in a new tab)
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions ↗ (opens in a new tab)
The Many Worlds of Amy Chang ↗ (opens in a new tab)
Why are SBOMs failing to stop supply chain attacks? ↗ (opens in a new tab)
Forensic Data: How to Acquire and Retain Vital Evidence ↗ (opens in a new tab)
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO ↗ (opens in a new tab)
WordPress 7.1.1 Maintenance and Security Release ↗ (opens in a new tab)
CiliumHound: Graphing Kubernetes Network Policies ↗ (opens in a new tab)
JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong ↗ (opens in a new tab)
NIS-2: Why practical relevance is crucial in management training ↗ (opens in a new tab)
Is prevention essentially a solved problem? ↗ (opens in a new tab)
Ten Years, Two Photos, and One Bet That Got Much Bigger ↗ (opens in a new tab)
Our latest Linux Foundation Europe donation will build a more private digital world. ↗ (opens in a new tab)
Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan ↗ (opens in a new tab)
Exfiltration in Plain Sight: How the SafePay Ransomware Group Abused OneDrive to Steal Data ↗ (opens in a new tab)
Introducing the Arm RD-1AE Virtual Hardware Platform ↗ (opens in a new tab)
Winner, Name that Ware July 2026 ↗ (opens in a new tab)
Rockwell Automation/Allen-Bradley MicroLogix PLCs Attack ↗ (opens in a new tab)
OpenClaw went viral. Meet the maintainers building and securing it. ↗ (opens in a new tab)
Farewell Golioth... and Hello Nordic! ↗ (opens in a new tab)
Making Linux Malware Suck Less: Stealthy Initial Access with emp3r0r Stager ↗ (opens in a new tab)
Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia ↗ (opens in a new tab)
CVE-2026-20349: Someone Is Crashing Cisco Firewalls. We Need to Talk About Why. ↗ (opens in a new tab)